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Abstract 

In order to improve the eavesdropping detection efficiency in two-step quantum 
direct communication protocol, an improved eavesdropping detection strategy using 
four-particle GHZ state is proposed, in which four-particle GHZ state is used to 
detect eavesdroppers. During the security analysis, the method of the entropy theory 
is introduced, and two detection strategies are compared quantitatively by using 
the constraint between the information which eavesdropper can obtain and the 
interference introduced. If the eavesdroppers intend to obtain all information, the 
eavesdropping detection rate of the original two-step quantum direct communication 
protocol by using EPR pair block as detection particles is 50%; while the proposed 
strategy's detection rate is 88%. In the end, the security of the proposed protocol 
is discussed. The analysis results show that the eavesdropping detection strategy 
presented is more secure. 

Keywords: quantum direct communication; four-particle GHZ state; eavesdrop- 
ping detection; protocol security; dense coding scheme 
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1 Introduction 

The goal of cryptography is to ensure that the secret message is intelligible 
only for the two authorized parties of communication and should not be altered 
during the transmission. So far, it is trusted that the only proven secure cryp- 
tophyte is the one-time-pad scheme in which the secret key is as long as the 

* E-mail:jinhaifei@bupt. edu.cn 



Preprint submitted to CEJP 



26 October 2011 



message. The two distant parties who want to transmit their secret message 
must distribute the secret key first. But it is difficult to distribute securely the 
secret key through a classical channel. The quantum key distribution (QKD), 
whose task is to create a secret key between two remote authorized users, is 
one of the most remarkable applications of quantum mechanics and the only 
proven protocol for secure key distribution. Since Bennet and Brassard pre- 
sented the pioneer QKD protocol (BB84 protocol) [1] in 1984, a lot of quantum 
information security processing methods have been advanced, such as quan- 
tum teleportation [2-7], quantum dense coding [8-9], quantum secret sharing 
[10-11] and so on. 

In recent years, a novel concept, quantum secure direct communication 
(QSDC) was put forward and studied by some groups. Different from key 
distribution whose object is to establish a common random key between two 
parties, a secure direct communication is to communication important mes- 
sage directly without first establishing a random key to encrypt them. Thus 
secure direct communication is more demanding on the security. As a secure 
direct communication, it must satisfy two requirements. First, the secure mes- 
sage should be read out directly by the legitimate user Bob when he receives 
the quantum state and no additional classical information is needed after the 
transmission of particles. Second, the secret message which has been encoded 
already in the quantum states should not leak even though an eavesdropper 
may get hold of the channel. That is to say, the eavesdropper cannot only 
be detected but also obtains blind results. As classical message can be copied 
fully, it is impossible to transmit secret message directly through classical 
channels. But when quantum mechanics enters into the communication, the 
story will change. 

Another class of quantum communication protocols [12-14] used to trans- 
mit secret message are called deterministic secure quantum communication 
(DSQC). Certainly, the receiver can read out the secret message only after he 
ex-changes at least one bit of classical information for each particle with the 
sender in a DSQC protocol, which is different from QSDC. DSQC is similar to 
QKD, but it can be used to obtain deterministic information, not a random 
binary string, which is different from the QKD protocols in which the user 
cannot predict whether an instance is useful or not. 

Many people are interested in researching QSDC, and many protocols like 
QSDC were proposed, including the protocols without using entanglement [15- 
17], the protocols using entanglement [18-23] and the two-way QSDC protocols 
[24-33]. The QSDC protocol can also be used in some special environments as 
first proposed by Bostr?m et al. [34] and Deng et al. [18]. In Ref. [34], Bostrom 
and Felbinger presented a famous QSDC protocol which is called "ping-pong" 
protocol. But researchers have found much vulnerability in the "ping-pong" 
protocol, such as the "ping-pong" protocol cannot resist the " man- in- middle 
attack" and the transmission capacity is low. 

In order to improve the eavesdropping detection efficiency in two-step quan- 
tum direct communication protocol, an improved eavesdropping detection 
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strategy using four-particle GHZ state is proposed, in which four-particle GHZ 
state is used to detect eavesdroppers. During the security analysis, the method 
of the entropy theory is introduced, and two detection strategies are compared 
quantitatively by using the constraint between the information which eaves- 
dropper can obtain and the interference introduced. If the eavesdroppers in- 
tend to obtain all information, the eavesdropping detection rate of the original 
two-step quantum direct commimication protocol by using EPR pair block as 
detection particles is 50%; while the proposed strategy's detection rate is 88%. 
In the end, the security of the proposed protocol is discussed. The analysis 
results show that the eavesdropping detection strategy presented is more se- 
cure. 

For simplicity, suppose that the protocol presented in Ref. [18] is shortened 
as DPP and the improved protocol in this paper is shortened as FPP. 



2 DPP Protocol 



An EPR pair can be in one of the four Bell states. 
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If the state of a single photon be measured, the Bell state will collapse and 
the state of the other particle will be completely determined if we know the 
measurement result of the first photon. As is known to all, the basic principle 
of the original "ping-pong" protocol is that one bit information can be en- 
coded in the states which is completely unavailable to anyone who has 
access to either of the particles. To extract secret message from Alice, Bob 
must own both particles, for no experiment performed on only one particle 
can distinguish these states from each other [34]. 

Let us start with a brief description of the DPP protocol. 

(51) Alice prepares an ordered N EPR pairs in state ijj^^ , extracts all the 
first particles, and forming the sequence Si in order. The remainder particles 
are formed the sequence ^2 in order. 

(52) Alice sends the sequence to Bob. Alice and Bob then check eavesdrop- 
ping by the following procedure: (a) Bob chooses randomly a number of the 
photons from the sequence 5*1 and tells Alice which particles he has chosen, 
(b) Bob chooses randomly one of the two sets of MBs, say, uz and ax to 
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measure the chosen photons, (c) Bob tells Alice which MB he has chosen for 
each photon and the outcomes of his measurements, (d) Alice uses the same 
MB as Bob to measure the corresponding photons in the sequence 5*2 and 
checks with the results of Bob. If no eavesdropper exists, their results should 
be completely opposite. This is the first eavesdropping check. After that, if the 
error rate is small, Alice and Bob can conclude that there is no eavesdropper 
in the line. Alice and Bob continue to perform stcp(S3); otherwise, they have 
to discard their transmission and abort the communication. 
(S3) Ahce encodes her messages on the sequence ^2 and transmits it to Bob. 
Before the transmission, Alice must encode the EPR pairs. In order to guard 
for eavesdropping in this transmission, Alice has to add a small trick in the 
sequence 5*2. She selects randomly in the sequence 5*2 some particles and per- 
forms on them randomly one of the four operations. The number of such 
particles is not big as long as it can provide an analysis of the error rate. Only 
Alice knows the positions of these sampling particles and keeps them secret 
until the communication is completed. The remaining sequence 5*2 particles 
are used to carry the secret message directly. To encode the message, they use 
the dense coding scheme of Bennett and Wiesner [8], where the information 
is encoded on an EPR pair with a local operation on a single qubit. Here, the 
dense coding idea was generalized into secure direct communication. Different 
from dense coding, in this protocol, both the particles in an EPR pair are sent 
from Alice to Bob in two steps, and the transmission of EPR pairs is done 
in block. Explicitly, Alice makes one of the four unitary operations {Uo,Ui,U2 
and Us) to each of her particles. 
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tively. These operations correspond to 00, Ol, 10 and 

(54) After the transmission of sequence 5*2, Ahce tells Bob the positions of 
the sampling pairs and the type of the unitary operations on them. Bob per- 
forms Bell-basis measurement on the sequence 5*1 and 5*2 simultaneously. By 
checking the sampling pairs that Alice has chosen, he will get an estimate of 
the error rate in the sequence 5*2 transmission. In fact, in the second transmis- 
sion. Eve can only disturb the transmission and cannot steal the information 
because she can only get one particle from an EPR pair. 

(55) If the error rate of the sampling pairs is reasonably low, Alice and Bob 
can then entrust the process, and continue to correct the error in the secret 
message using error correction methods. Otherwise, Alice and Bob abandon 
the transmission and repeat the procedure from the beginning. 
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(S6) Alice and Bob do error correction on their results. This procedure is 
exactly the same as that in QKD. However, to preserve the integrity of the 
message, the bits preserving correction code, such as CASCADE [35], should 
be used. 



3 FPP Protocol 



3. 1 The process of the FPP protocol 



In the protocol presented in Ref.[36], the transmission is managed in batches 
of N EPR pairs. An advantage of block transmission scheme is that we can 
check the security of the transmission by measuring some of the decoy photons 
[37-38] in the first step, where both Alice and Bob contain a particle sequence 
at hand, which means that an eavesdropper has no access to the first particle 
sequence, then no information will be leaked to her whatever she has done to 
the second particle sequence. Following this method using block transmission, 
the FPP scheme is proposed, shown in Fig.l. 
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Fig. 1. The process of the FPP 
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Now let us give an explicit process for the FPP. 

(SI) Bob prepares a large enough number (A'") of Bell states 



(9) 



in order. He 
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extracts all the first particles in these Bell state, forming the sequence A (the 
travel quhits) in order, used to transmit secure message, and the remaining 
particles forming the sequence B {the home quhits) in order. 
(S2) Bob prepares a large number {cN/(l-c)) of four-particle GHZ states ip 
and forms the sequence C to detect eavesdropping. Here, c expresses the prob- 
ability of switching to the control mode in the original "ping-pong" protocol 
[34]. Note that the sequence C includes 4cN/(l-c) particles. In the sequence 
C, Bob reserves the particle 1 of the four-particle GHZ state, and measures 
them by Z-basis Bz = { 



four-particle GHZ state to t' 



ly}. After that. Bob inserts particles 2, 3, 4 of the 
le sequence A randomly, forming a new sequence 
D, which includes decoy photons of four-particle GHZ state, but only Bob 
knows the position of decoy photons. 

(53) Bob stores the sequence B and sends the sequence D to Alice. 

(54) After Alice received the sequence D, Bob tells her the positions where are 
the decoy photons and the measurement of particles 1 of four-particle GHZ 
state in C. Then, Alice extracts the decoy photons from the sequence D and 

performs measurement. This is the first eavesdropping check. If there is no 
eavesdropper, when Bob's measurement is 0^,then the measurement result of 

particles 2, 3, 4 should be 000^;while Bob's measurement is 1^, particles 2, 

3, 4 should be 111) , and they continue to the next step(S5), the FPP pro- 
tocol keeping on. Otherwise, the communication is interrupted, and the FPP 
protocol switches to (SI). 

(55) Alice discards the decoy photons, then the sequence D becomes to the 
sequence A again. Alice encodes her messages on the sequence A and trans- 
mits it to Bob. In order to guard for eavesdropping in this transmission, Alice 
also has to insert some four-particle GHZ state particles in the sequence A 
before the transmission. Alice only inserts particles 2, 3, 4 of the four-particle 
GHZ state in the sequence A and reserves the particle 1. Only Ahce knows the 
positions of these decoy photons and the measurement results of the particles 
1, and keeps them until the communication is completed. The sequence A are 
used to carry the secret message directly. To increase the transmission capac- 
ity, the dense coding scheme be used to encode the secret message. Different 
from dense coding, in this protocol, the transmission of EPR pairs is done 
in block. Explicitly, Alice makes one of the four unitary operations {Uo,Ui,U2 
and Us) to each of her particles, and they transform the state 0"*"^ into 0"*"^, 

, V^) s^nd V' )) respectively. These operations correspond to 00, 01, 10 
and 11, respectively. Then Alice transmits the sequence A which carries decoy 
photons to Bob. 

(56) After transmitting the sequence A, Ahce tells Bob the positions of the 
decoy photons and the measurement results of the particles 1. To obtain the 

secret message. Bob performs Bell-basis measurement on the sequences A and 
B simultaneously. By checking the decoy photons that Alice insert. Bob will 
get an estimate of the error rate in the sequence A transmission. In fact. Eve 
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can only disturb the transmission and cannot steal the information because 
she can only get one particle from an EPR pair. If the error rate of the decoy 
photons is reasonably low, Alice and Bob can then entrust the process, and 
continue to transmit the secret message. Otherwise, Ahce and Bob abandon 
the transmission and repeat the procedures from the beginning. 

As discussed above, the secret message can be transmitted securely be- 
tween Alice and Bob, and the eavesdropper will be found out if she disturbs 
the quantum line. Eve cannot read out the information from the EPR pairs 
even if she captures the sequence A, because no one can read the information 
from one particle of the EPR pair alone. So, the improved protocol is secure. 



3.2 The security analysis of the protocol 



In the original "ping-pong" protocol, the author calculated the maximal amount 
of the information I{dio) that Eve can eavesdrop and the probability dio that 
Eve is detected [34]. And the function I{dio) is provided. When pQ = = 0.5, 



I{dio) = -diolog2dio 



dio)log2{l - dio). 



(10) 



The above method can be used to compare the efficiency of eavesdropping 
detection between the two protocols. 

Now, let us analyze the efficiency of eavesdropping detection in FPP proto- 
col. In order to gain the information that Alice operates on the travel qubits, 
Eve performs the unitary attack operation E on the composed system firstly. 
Then Alice takes a coding operation on the travel qubits. Eve performs a mea- 
surement on the composed system at last. Note that, all transmitted particles 
are sent as block before detecting eavesdropping, which is different from the 
original "ping-pong" protocol. For Eve does not know which particles are used 
to detect eavesdropping, so what she can do is only performing the same at- 
tack operation on all the particles. As for Eve, the state of the travel qubits is 
indistinguishable from the complete mixture, so all the travel qubits are con- 
sidered in either of the states 



or 



Ij with equal probability p = 0.5. 
Generally speaking, suppose there is a group of decoy photons at the four- 
particle GHZ state ?/^^, and after performed the attack operation E, the states 

0) and 1) become 
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Xj) and 



where 



E uniquely, anc 



yij are the pure ancillary states determined by the operation 

|/3|2 = l,|m|2+|n|2 = l. (13) 
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Then let us calculate the detection probability. Attacked by Eve, the state 
of composed system becomes 



Eve 



I ® E ® E ® E 



OxOxOxOx) + 



a/2 



O) ® (oL Oxo) + ^ Ixi)) ® (a Oxo) + /3 Ixi)) ® (a Oxq) + /3 Ixi)) 



+ 
1 

71 



1) (m 



+ 



o)(g)(^Q!^ OxoOxoOxq^+q;^/? OxoOxoIxi^+q;^/^ OxqIxiOxo^+Q!/?^ Oxq^xiIx 

+a^f3 IxiOxoOxo) + Q!/3^ IxiOxqIxi) + o;/?^ IxilxiOxo) + (i^ Ix^lxilxij^ 

l) (8) (m^ OyoOyoOyo'^ + m'^n OyoOyolyi^ +m^n OyolyiOyo^ + mn^ Oyolyilyi) 

lyiOyoOyo)+mn'^ lyiOyolyi^+mri^ lyilyiOyo)+n^ lyilyilyi)^ . (14) 
Obviously, when Alice performs measurement on the decoy photons, the 



probability without eavesdropper is 

Kk>j=i(i«'i^+i"'i^)- 

So the lower bound of the detection probability is 



(15) 



(16) 



Suppose jap = a, = b, \m\^ — s, \n\^ — t, where a,b,s and t are positive 
real numbers, and a + b — s + t — 1. Then 



(17) 



However, in DPP, authors calculated the efficiency of eavesdropping detec- 
tion, here don't analyze it again, and the efficiency is 
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|^|2^|/5f = l-|a|2 = l-|«f. 



(18) 



Now, let us analyze how much information Eve can gain maximally when 
there is no control mode. Similar to that in Ref. [18], first, let us suppose 
that the quantum state of the photon in the hand of Alice is o), Alice takes 
measurement on the photon in her hand with single-photon detector and the 



state is 



O). Then the state of the system composed of Bob's photon is 



= E\d,E) = e\o)\e) = a|o)|£oo) + /3|l)|^^oi) = a|o, £oo) + £oi), 

(19) 
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and Eve's probe can be described by 



0, £00/(0, £00 



3\ 1, £01/(1, £01 0,£oo)(l,£oi 1, £01/(0, £00 

(20) 

After encoding of the unitary operations Uo,Ui,U2 and C/3 with the probabih- 
ties Po,Pi,P2 and ps, respectively, the state reads 

p" = (Po +P3)|ar 0,£oo)(o,£oo + (Po +^3)1/3^ l,£oi)(l,£oi 
+(Po -P3)a/3* 0,£oo)(l,£oi + (Po -P3)q;*^|1,£oi)(0,£oo 



+(Pi +P2)|ar l,£oo)(l,£oo + {Pi+P2)\P\'^ 0,£oi)(0,£oi 
+ {Pi - P2)aP* 1, £oo)(o, £01 + {pi - P2)a*l3 0, £oi)(l, £00 



(21) 

which can be rewritten in the orthogonal basis {0,£oo), l,£oi), l,£oo/, 0,£oi)}, 
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(22) 



with 



PO +Pl +P2 +P3 = 1- 



(23) 



The information /q that Eve can get is equal to the Von Neumann entropy 



-^0 = X]~'^i^og2 K- 

i=0 

Where Ai(z = 0,l,2,3,) are the eigenvalues of p", which are 

Vi = ^(Po + Ps) ± ^\/ipo + P3y - 16poP3|an/3P 

= ^(Po + P3) ± ^\/{Pq+ Psf - 16poP3(c? - d'^) 



1 



1 



A2,3 = ^{pi+P2) ± ^\/{pi+P2y - 16piP2|an/3p 



(24) 



(25) 



= ^(pi +P2) ± y{pi +P2)2 - IQpMd - d?) (26) 

In the case of Po = Pi = P2 = Pa = 0.25. where Alice encodes exactly 2 
bits, expression(25-26) simplify to Aq = 0.5(i, Ai = 0.5(1 — d),\2 = 0.5d and 
A3 = 0.5(1 — d). Interestingly, the maximal information gain is equal to the 
Shannon entropy of a binary channel 

Io{d) = -Idlog^ild) - (^ - ^d) log2(^ - Id) 
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- ld\og,{^-d) - - ^d) log/- - ^d). (27) 

Then assume that Bob sends 1^ rather than 0^. The above security anal- 
ysis can be done in full analogy, resulting in the same crucial relations. The 
maximal amount of information is equal to the Shannon entropy of a binary 
channel 

h{d) = -ld\og,{^d) - (^ - ^d) log2(^ - Id) 

- Idlog.i^d) - (^ - irf) log2(^ - Id). (28) 
So the maximal amount of information that Eve can obtain is 

/ = ^(/o + /i) = 1 - d\og^ d-{l-d) log2(l - d). (29) 

After some simple mathematical calculations in FPP, when a = t, get 

diF^l- a^ (30) 

and the maximum / is 



I{diF) = l + H{^l-diF), (31) 

where 

H{x) = —x\og2X — {1 — x) log2(l — x). (32) 
However, in DPP, the maximum / is 

I(diD) ^1-diD log2 dw - (1 - dw) log2(l - dw) = 1 + H{dw). (33) 

The above analysis shows that function I{dij:i) and I{diF) have the similar 
algebraic properties. If Eve wants to gain the full information (/ = 2), the 
probabilities of eavesdropping detection are dmil — 2) — 0.5 in DPP and 
diF{I = 2)= 0.88 in FPP. 

In order to contrast the two functions, Fig. 2 is given. As are shown in Fig. 2, 
if Eve wants to gain the full information, she must face a larger detection 
probabihty in FPP than DPP. This also indicates that FPP is more secure 
than DPP. 

Taking into account the probability c of the decoy mode, the effective trans- 
mission rate, i.e. the number of message bits per protocol run, is 1-c, which is 
equal to the probability for a message transfer. So, if Eve wants to eavesdrop 
one message transfer without being detected, the probability for this event is 

s{c,d) = (l-c) + c(l-d)(l-c) + c^(l-c/)^(l-c) + ... = (34) 
Then the probability of successful eavesdropping / = nl{d) bits is s(/, c, d) — 

s{c,dy/^^'^\ So 
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where 



I{d) = 1 + H{^1^). 



(36) 
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Fig. 2. The comparison of the two detection results. The dotted hne expresses the 
function I{di£)) in DPP and the thick hne expresses the function I{diF) in FPP. 
Obviously, if Eve wants to get the full information, she must encounter the higher 
detection efficiency in FPP 



Now let us analyze the security of the FPP. In the limit / — t- oo (a message 
or key of infinite length) get s — )■ 0, so the presented protocol in this paper 
is asymptotically secure. If the security of the quantum channel is ensured, 
the protocol is completely secure. For example, a choice of the decoy mode is 
c = 0.5. In Fig. 3, the eavesdropping success probability as a function of the 
information gain / is plotted, for c = 0.5 and for different detection proba- 
bilities d which Eve can choose. Note that for d < 0.5, Eve only gets part of 
the message right and does not even know which part. So, the FPP protocol 
is proved secure. 
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Fig. 3. Eavesdropping success probability as a function of the maximal eavesdropped 
information, plotted for different detection probabilities d. 
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4 Conclusion and Further Work 



In summary, an improved eavesdropping detection strategy based on quantum 
direct communication protocol based on four-particle GHZ state has been in- 
troduced, and two eavesdropping detection strategies are compared quanti- 
tatively by using the constraint between the information that eavesdropper 
obtains and the interference introduced. In FPP, the sequence B is always in 
hands of Bob and Eve can only touch the sequence A, and any useful message 
will not be leaked to the potential eavesdropper. So the security message can 
be securely transmitted to the receiver. Compared with the DPP, in the FPP 
protocol, the four-particle GHZ state particles are used to detect eavesdrop- 
ping which increases the efficiency of detection eavesdropping. 

In the analysis, if the eavesdropper obtains the full information, she must 
face a larger detection probability in the FPP than DPP, which shows that 
the efficiency of eavesdropping detection in FPP is higher than DPP, so it can 
ensure the quantum direct communication protocol more secure. In order to 
detect eavesdropping. Bob sends more decoy photons than DPP, while this 
method reduces the number of measurement. That is. Bob gains the better 
security at the cost of sending more particles. 

As we know, the quantum direct communication protocol can also be used 
as an efficient QKD protocol. In this paper, only the situation that the im- 
proved protocol is used as a QKD strategy is considered. So the weaknesses 
which the quantum direct communication protocol must be faced, such as the 
noise channel [39-40] , the Dos attack [41-42] and so on, may not be considered. 
In the further work, the other QSDG protocol will be researched. 
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